6
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N
Description
In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.
Basic Information
ID
CVE-2025-7962
Source
eclipse
Published
Jul 21, 2025 at 17:22
Modified
Jul 24, 2025 at 10:18
Affected Product
Vendor
Eclipse Foundation
Product
Jakarta Mail
Version
1.6.8